kuroguro
Joined 10 years ago
Karma
2,389
Submissions
560
Member since
Nov 26
Recent submissions
Comment · 2 months ago
he probably means the nitter part, not the literal domain. never occurred to me before tho.
Comment · 3 months ago
Likely referencing https://www.crowdfense.com/exploit-acquisition-program/
Zerodium used to offer up to 300k in 2021 https://www.securityweek.com/sites/default/files/images/Zero...
These brokers usually don't pay the bulk sum - they sell access to nation actors and you get payed out over time as long as the bug is not patched to discourage reselling and burning it. I doubt anyone would confirm if they got the full payment or not for something similar.
Comment · 1 year ago
Clearly we need blockchain to solve this, not AI! /s
Comment · 1 year ago
Eh, I think part of it is just making a more clickbaity title.
Comment · 2 years ago
Maybe he's confusing it with the other post? https://subseacables.blogspot.com/2024/10/facebooks-semi-sec...
Comment · 2 years ago
Huh, good to know. I guess the only other downside is actually making the compiler do the bswap depending on the language. Eg C has some weird compiler specific builtin keywords vs zig has a nice packed struct that does it for you.
Comment · 2 years ago
I know that's the standard but for all private projects I always write little endian so I can sleep soundly at night knowing I've saved precious picoseconds not flipping to cpu order.
Comment · 2 years ago
+1 there are many pain points, probably for historic reasons. *nix almost always comes with the source, so binary only debugging is never a priority.
Comment · 2 years ago
> your hacker experience level is: Computer Illiterate
Well, apparently I can't use the computer ^^;
Comment · 2 years ago
I think it's the name of Vietnam's currency.
Comment · 2 years ago
Technically. I'm saying there's a huge difference between what a layman might read "large org conspires to spy" and a possible dull reality of "some engineer neglects to remove convenience feature".
Comment · 2 years ago
Basically there's a master key that allows reading blocks that are supposed to be unreadable.
> put in there on purpose by the manufacturer
Hard to prove "on purpose" either way, my guess it was for debugging.